CVE-2023-49985: XSS

Published Mar 6, 2024

Updated

A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cname parameter.

Affected Software

2 affected components

School Fees Management System School Fees Management System

oretnom23 School Fees Management System=1.0

Event History

Dec 20, 2023

Exploit Published

via GitHub·04:12 AM

Mar 6, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2023-49985?

The severity of CVE-2023-49985 is classified as medium due to its potential to allow cross-site scripting attacks.

How do I fix CVE-2023-49985?

To fix CVE-2023-49985, validate and sanitize user input, especially the cname parameter, to prevent script execution.

Who is affected by CVE-2023-49985?

CVE-2023-49985 affects users of School Fees Management System v1.0 and its components.

What are the implications of CVE-2023-49985?

The implications of CVE-2023-49985 include the potential for attackers to execute arbitrary web scripts or HTML within the application.

Is CVE-2023-49985 easy to exploit?

Yes, CVE-2023-49985 can be exploited easily if proper input validation and sanitization measures are not implemented.